multiplexer active

brood-box

Maker: stacklok License: Apache-2.0 Stars: 58 First released: 2026-02-13 Language: Go

CLI IDE

About

brood-box exists because letting a coding agent run arbitrary commands on a developer machine is a trust problem that containers only partially solve. Stacklok's Go CLI boots a lightweight virtual machine via libkrun (KVM on Linux, Hypervisor.framework on macOS), snapshots the workspace copy-on-write, and launches the chosen agent — Claude Code, Codex, OpenCode, Hermes, or Gemini CLI — inside it over an ephemeral SSH session. An egress firewall restricts network access to LLM providers and package registries by profile, with a locked mode allowing only the LLM endpoint; ToolHive MCP servers are auto-discovered and proxied into the VM. When the agent exits, the tool computes a diff and the user reviews each file before changes are flushed back, with hash re-verification guarding against tampering. Stacklok positions it as experimental infrastructure for teams that want hardware isolation, DNS-aware egress control, and zero persistent state around agents they run daily.